Note that when you use
-Djava.security.policy==...
(double equals sign) you override the
default JVM security policy files, while if you use
-Djava.security.policy=...
(single
equals sign), you append the security policy file to any existing ones.

The following is a sample security policy file to be used with DataNucleus.